Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/2542bdfc-f1ce-3770-86e0-95eb1651cc61.roa
File:                     2542bdfc-f1ce-3770-86e0-95eb1651cc61.roa (raw, json)
Hash identifier:          urPIBXyIk6rKVrwrSVGMR0dTI2Vv0+zGm+fldzQfJio=
Subject key identifier:   EA:A5:93:F4:A8:5B:D2:4C:30:7F:94:2D:F0:C6:78:6C:5E:C5:94:95
Certificate issuer:       /CN=14c9e0ce-0f12-4bc8-989c-5d332a7cf522
Certificate serial:       010D0C9F4328584DF4DB5D734220642C95CB5D00
Authority key identifier: FD:FA:5F:D3:82:C9:5A:C7:81:E6:B2:B0:54:B4:C9:D1:F0:1C:B5:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/2542bdfc-f1ce-3770-86e0-95eb1651cc61.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     12276
IP address blocks:        192.33.255.0/24 maxlen: 24
                          2620:11a:b000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:5d:73:42:20:64:2c:95:cb:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14c9e0ce-0f12-4bc8-989c-5d332a7cf522
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=558c5b50-0c7c-474c-8ad5-b9ad4734a13d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:23:92:c4:a1:f0:08:b4:c6:f4:36:c8:ff:2f:
                    2c:9c:fc:f6:7d:d1:64:94:32:2e:33:48:e9:70:2e:
                    f3:cc:26:86:6f:5e:25:86:ab:c7:c3:15:af:5c:c2:
                    1b:e8:5c:e8:8d:77:0c:c8:e2:f3:e8:18:a1:3f:23:
                    8b:22:3a:b3:9d:90:f6:43:03:09:28:ed:59:a7:cc:
                    b0:32:0d:0e:24:87:ad:f0:9c:ea:e4:52:2d:e6:7d:
                    36:f8:86:a6:76:39:d8:19:8e:63:39:aa:7b:9b:30:
                    ad:fb:53:fb:29:49:49:c4:10:d8:0b:64:1c:94:4f:
                    ce:36:0e:bd:b5:03:dc:ff:70:4a:22:83:f8:d9:db:
                    a0:58:d1:9c:39:88:b5:30:db:a7:68:b1:1b:c8:7a:
                    fb:bc:4f:e6:75:b9:66:5e:97:81:58:39:d2:17:e4:
                    4d:dd:23:02:76:34:0a:14:e1:2a:5b:f4:8a:45:07:
                    8f:23:f7:69:d3:9d:2c:aa:99:32:8a:38:98:8d:81:
                    9f:bf:82:46:f6:43:5f:bd:2f:24:56:d4:86:99:34:
                    5d:2e:d7:45:01:c5:c9:33:5d:1a:8c:1a:bc:5a:59:
                    27:9c:91:37:20:fb:0c:fe:3f:20:29:98:fb:b1:69:
                    8f:43:f5:12:ef:97:18:d6:1c:6e:f1:d0:ce:d4:71:
                    e4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A5:93:F4:A8:5B:D2:4C:30:7F:94:2D:F0:C6:78:6C:5E:C5:94:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/2542bdfc-f1ce-3770-86e0-95eb1651cc61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.crl

            X509v3 Authority Key Identifier:
                keyid:FD:FA:5F:D3:82:C9:5A:C7:81:E6:B2:B0:54:B4:C9:D1:F0:1C:B5:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.33.255.0/24
                IPv6:
                  2620:11a:b000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:21:6c:16:41:e3:5f:c2:f0:a9:f4:d0:28:f3:cd:f4:6b:7e:
         0f:7c:6a:f9:99:96:8a:be:75:6d:59:9e:fe:48:a0:88:2b:77:
         e0:cc:ca:7a:fd:fe:da:89:31:9d:db:e0:77:0c:10:77:55:c5:
         1b:d8:a0:cf:1c:88:f3:e9:1a:76:94:d2:a5:67:fe:cc:e9:e1:
         96:5a:85:b8:1a:54:84:9e:74:ff:75:38:d4:8c:da:79:ff:a5:
         0f:98:33:88:c0:79:36:96:c0:df:53:e7:b0:f1:30:a4:09:f7:
         58:ce:5f:9c:67:40:04:fc:0e:ba:23:8d:55:55:18:b1:26:9d:
         84:48:9f:08:88:59:7d:a8:6d:2b:90:1d:0c:b3:c0:47:aa:13:
         a6:fd:65:d4:63:67:07:2f:0d:6e:ea:45:47:a4:fa:fa:67:f1:
         41:4e:fc:77:68:4e:5b:c7:42:db:67:a6:86:6b:7f:de:31:2a:
         2b:eb:74:22:ef:ed:e2:95:34:4e:24:75:5d:7a:5b:df:c4:51:
         ed:39:53:e0:46:e0:15:e4:72:3f:5a:b2:96:2d:ef:27:31:2d:
         9e:15:bb:aa:46:fa:c8:bd:b2:5c:0a:83:e7:22:f1:e6:22:35:
         62:f2:96:5b:41:f1:f3:ca:c7:df:d5:9d:69:5c:4a:d8:42:28:
         b5:53:a0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:14:27 2026 by rpki-client